(19) 



J 



Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 



(12) 



01) EP 1 329 810 A1 
EUROPEAN PATENT APPLICATION 



(43) Date of publication: 

23.07.2003 Bulletin 2003/30 

(21) Application number 032502262 

(22) Date of filing: 14.01 2003 



(51) inta7: G06F 9/46 



(84) Designated Contracting States: 


• Young, Wendy 


AT BE BG CH CY CZ DE DK EE ES.FI FR GB GR 


Swastika, Ontario P0K 1T0 (CA) 


HU IE IT U LU MC NL PT SE SI SK TR 


• Young, Wayne 


Designated Extension States: 


New Uskeard, Ontario P0J 1P0 (CA) 


ALLTLVMKRO 


• Lakins, Ian 




i Kingston, Ontario K7J 4P6 (CA) 


(30) Priority: 14.01.2002 GB 0200745 


• Day, John 




Kingston, Ontario K7K 4J1 (CA) 


(71) Applicant: Mitel Knowledge Corporation 


» Banger, Colin 


Kanata, Ontario K2K 2W7 (CA) 


Kingston, Ontario K7L 5P6 (CA) 




• Athersych, David 


(72) Inventors: 


Kingston, Ontario K7L 5P6 (CA) 


• Gray, Thomas 


RR3 Carp, Ontario K0A 1L0 (CA) 


(74) Representative: Gold, Tibor 2. et al 


• Amyot, Daniel 


Kilburn & Strode 


Hull, Quebec J9A 3E3 (CA) 


20 Red Lion Street 


• Leger, Oriane 


London WC1R 4PJ (GB) 


Cornwall, Ontario K6H 2C8 (CA) 



(54) Tuple space operations for fine grained system control 



(57) According to the present invention, a plurality 
of new tuple-space operators is provided for enhancing 
the capability of tuple spaces to provide fine-grained 
control of presence and location systems. New Deacti- 
vate/Activate and Mass Timer Extension operators may 



be applied simultaneously to large numbers of tuples 
and anti-tuples, thereby improving system responsive- 
ness. A new Query operator greatly increases the ability 
of presence and location systems to guarantee that pri- 
vate information in the tuple space remains private. 
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Description 

Field of the Invention 

[0001] This invention relates generally to global associative memory systems, and more particularly to an extended 
operating set for improved performance of tuple space fine grained system control. 

Background of the Invention 

[0002] Tuple spaces provide a unique form of flexibility in the sharing of information and the coordination of applica- 
tions. As described in greater detail below, tuples are collections of key-value pairs stored in a tuple space that can be 
queried based on the matching of anti-tuples by tuples. The original Linda model by David Gelemter (N. Camera and 
D. Gelemter, "Linda in context", Communications of the ACM, 32(4):444-458, April 1 989) has found widespread use 
in collaboration of distinct functional entities. Traditional tuple space operations are performed on single tuples as 
coordinating mechanisms for providing coarse-grained control. However, such prior art systems are unsuitable for 
providing fine-grained control of system operation. 

[0003] For example, the inventors have contemplated the application of tuple spaces to the operation of presence 
and location systems that require fine-grained operations in which large numbers of tuples are issued and retracted 
for each state change of the system. Consequently, there is a need to extend the traditional tuple space operations to 
accommodate the high-speed issuance and retraction of large numbers of tuples and anti-tuples. 

Summary of the invention 

[0004] According to the present invention, a plurality of new tuple-space operators is provided for enhancing the 
capability of tuple spaces to provide fine-grained control of presence and location systems. New Deactivate/Activate 
and Mass Timer Extension operators may be applied simultaneously to large numbers of tuples and anti-tuples, thereby 
improving system responsiveness. A new Query operator greatly increases the ability of presence and location systems 
to guarantee that private information in the tuple space remains private. 

[0005] More particularty, in the original Linda model tuples and anti-tuples are inserted and removed from the tuple 
space one at a time by the various operators. This has been found to be unsatisfactory for fine-grained control of a 
system since any system state change may require the removal and insertion of large numbers of tuples. The new 
Deactivate/Activate operation either activates or deactivates all tuples that match a template, in a single operation. 
Tuples are not removed or inserted, as in the prior art, but are marked with a newly defined flag that indicates that they 
either should or should not be subject to matching. This greatly enhances the responsiveness of the tuple space when 
used for fine-grained control. 

[0006] Many extensions of Linda have addressed the problem of tuple "garbage collection" by providing individual 
tuple timers that remove orphan tuples at their expiry times. This solution is adequate but timers are notoriously difficult 
to manage. A timeout that is too short will destabilize the standard operation of a system while a timeout that is too 
long wastes valuable tuple memory. The new Mass Timer Extension operation automatically extends the timeout period 
for all tuples that match a particular template. 

[0007] Finally, tuple spaces are ideal for the sharing of information about human beings as well as applications. 
Indeed it is contemplated that tuple spaces will be increasingly used in open environments with users in who are related 
in no other way to each other than by the use of the tuple space. In such situations, there is a danger of malfeasance 
by malicious users who may attempt to illicitly use the tuple space. A major example of this is in the case of presence 
systems in which private information about individuals is shared with trusted parties. It is important in such situations 
that this information be protected against the inquiries of malicious parties. The new Query operation returns a list of 
all antttuples that are looking for tuples that match a specific template, which can be used, for among other things, to 
identify all anti-tuples that match a specific individual's presence tuples. Unauthorized anti-tuples can be detected by 
this operation and removed. The Query operator does not have to rely on detecting the activity of the malicious user 
when he/she inserts an offending anti-tuple, which makes the systems very robust in face of privacy attacks. 
[0008] The new operations provided according to the present invention enable tuple spaces to be used as the base 
platform for call processing architectures providing addition and creation of features on the fly. 

Brief Description of the Drawings 

[0009] A detailed description of the invention is set forth herein below, with reference to the sole drawing, which is 
a block diagram of a hardware-assisted tuple space for implementing the tuple space with extended operations ac- 
cording to the preferred embodiment. 
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Detailed Description of the Preferred Embodiment 

[0010] Before discussing the invention is detail, a brief introduction is set forth below to the basic structure and 
operation of a tuple space. 

5 [001 1 J A tuple space is a set of type/value ordered pairs called ingles. Each ingle consists of a type (e.g. Name) and 
a value (e.g. John Doe). Thus, a tuple which describes an employee for a company could, for example, be: 
{ :name John Doe :age 37 :emp!oyee_number 12345 :start_date 810126 position T12 } 

[0012] The tuple space enables coordination by allowing queries based on the matching of tuples by anti-tuples. An 
anti tuple is a tuple that can be used as a query in the tuple space. In form, it is identical to a tuple except that the value 
10 of any or all fields may be replaced by a T which indicates a 'donl care' condition. Tuple spaces are set up to match 
tuples with anti-tuples which agree in all fields except for that one indicated by the ? query. Thus the anti tuple: 
{ :name ? :age 37 :employee_n umber ? :start_date ? :position T12 } 
would return the tuples for all employees of position T12 who are 37 years old. 
[0013] Conventional operations on the tuple space consist of : 

15 

Poke - place a tuple in the tuple space. Duration may be specified for how long this tuple should remain in the 
space. This may be any period up to indefinite. 

Peek - query the tuple space with an anti-tuple. This query may be specified to last for any period up to indefinite. 
20 Copies of matching tuples will be returned through the interface and the tuples remain in the tuple space. 

Pick - query the tuple space with an anti-tuple. This query may be specified to last for any period up to indefinite. 
Copies of matching tuples will be returned through the interface and the tuples are removed from the tuple space. 

25 Cancel - with the specified anti-tuple, remove all matching anti-tuples from the tuple space. Tuples themselves 

may be removed directly by an appropriate pick request. 

[0014] Turning to the block diagram, a hardware-based tuple space is shown for implementing the extended oper- 
ations according to the present invention. An I/O Buffers and Control block 1 0 is provided including Input/Output Buffers, 
30 Search Logic and Memory Management components. The I/O Buffers link the device to the outside environment The 
Search Logic and Memory Management functions perform general memory control for the device and conduct ail 
searches. A tuple memory 1 2 is provided to store tuples and an anti-tuple memory 1 4 is provided to store anti-tuples, 
both of which may either be implemented using conventional RAM or in software. Multiple sessions can be set up 
wherein tuples and anti-tuples are passed into the space and tuples and anti-tuples are returned as a result of the 
35 operations. Within a single session tuples and anti-tuples are passed into the space along with the desired operator. 
According to the present invention, the following information is passed with the tuple/anti-tuple: Operator, Tuple/Anti- 
tuple, and Time to Live parameter. The Search Logic of block 10 searches the tuple space and performs the indicated 
operations by means of special delimiting flags, assignment on fixed relative memory locations such as word bound- 
aries, as discussed in greater detail below. 
40 [0015] In order to address the speed problems associated with using conventional RAM for sequential searching, 
tuple attributes are stored in an array and are used to provide a mechanism whereby impossible tuple matches (differing 
numbers of key-value pairs) can be identified without having to search for the tuple in memory. Specifically, tuple 
attribute array memory (JAM) is provided that contains important attributes of the stored tuples and anti-tuples. Two 
specific TAMs are provided - the tuple TAM (TTAM 16) for tuple storage and the anti-tuple TAM (ATAM 18) for anti- 
cs tuple storage. 

The structure of the data in each TAM is as follows: 

[0016] 



Number of Key-Value Pairs 


Number of key-value pairs in the tuple 


Activated Flag 


if set the tuple is activated and can be used in a search process. If not set, the tuple 
is inactive and will be excluded from any search process. 


Starting address 


Location in memory for the start of the tuple 


Tuple Length 


Length of tuple in words 
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(continued) 



Number of Key-Value Pairs 


Number of key-value pairs in the tuple 


Time Out Value 


Absolute system time when tuple is to be automatically cancelled 


Cancel Rag 


Set if the tuple is to be cancelled and removed from memory 
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f" 7 * J^ 3 ™* T** t 16 and 18 can be used to speed up the matching process of the tuple space. In particular. 

Sfc JUlO? t . inf °' mat ' 0n m ^ **** h additi0n 10 ,he Startin 9 P° int in m emory. Tuples/anti-tuples will 
matehonV * they contain the samenumberof key value pairs. This information can beobtainedeasilyfromtheincomino 
tuple/anti-tuple and matched against the information in the array. Only the tuples in which the numbers of key/Value 
pairs match are considered for further matching by accessing the tuples themselves in memory. 
[0018] Thus, by having tuples that differ in the number of key-value fields to identify specific classes only those 

SncTlLT^ ° f ?*' fl ! ,dS Wi " te ** de,iberate| y ««*S t"Pte8 to differentiate them ac- 

cording to class, enhanced search speed is achieved. 

*V n C A^ rdi " 9 10 the pr6Sent invention - ^P'^ and anti-tuples may be activated or deactivated by using the ACT 
^? ^« °P eratore marked so that they will be included in or excluded from the matching process) If the 

fSSU S ^^ e fe indUded matChing pr0Cess - tf ft fe not set men * is excluded from the process 
Lteeo the ACT and DEACT operators improves system speed and responsrvftyfor applications in which large numbers 
of tuples or antHuples are used for collaboration in different system states. Instead of wasting time removing and 
™™ 9 P ant| - tlJ P ,es 31 ^ange of state, they may be activated or deactivated en masse 
[0020] Tuples and anti-tuples are stored in their respective memories 12 and 14 in contiguous groupings starting at 
tiie top of each memory. All lower tuples are moved up to fill in thegaps In the groupings created by cancelled tuples 

needs to be taken to find an appropriately sized space in memory to hold it, in contrast with the prior art hardware- 
based systems d,scussed above. Instead, the tuple is placed at the bottom of the memory. This is also in contrast to 
software*ased memory managementtechniques in which fragmentation is a major and common problem consuming 
much real time processing. 

SJfl, V"**?? 3 71 . me ° Ut ValUe f ° r ea0h ^ m efBcfent «mer-based garbage collection process is provided 
to handle he problem of orphan tuples whose owner objects have terminated or erroneously forgotten about them 
These tuples can fill the memory, which causes management problems requiring software intervention and periodic 
re-mibahon of the space. According to the present invention the Time Out Values are implemented in hardware Expired 
tuples are simpy marked as cancelled and then removed from memory automatically by the Memory Management 
process of block 10, as described in greater detail below. a 
[0022] Tuples are stored in the tuple memory 12 such that individual keys and values may be determined by the 

^ T ? 6re arB SeVera ' we,| - known me t hods for accomplishing this function, including the use of 
special del.mrt.ng flags, assignment on fixed relative memory locations such as word boundaries, etc. The details of 

rZ^ P ^ "! ? ined are not important t0 »• P^nt invention. A particular implementation is set forth below 
JST™!? *? "^are-assisted tuple space with which the operators of the present invention are applied, 

1 ^° W T th referenCe t0atypical Pick serene"- ™ e operations for Poke, Peek and Cancel are simTar and 

would be obvious to a person skilled in the art upon reading this specification 

Kf 41 ^iTf^ ° Perati0n ' *" anB - tUple is received from an external process and placed in the Input/Output 
buffers of block 1 0. The attributes described above for the incoming anti-tuple are then extracted and matched in torn 
bythe Search Logic of block 10 againstthe attributes of the tuples stored inTTAM 16. Initially the state of the ACTIVATE 
flag is checked, if for a particular tuple it is not set, the tuple is deactivated and is not to be used for matching as 
described above. In this case the search moves to the next tuple. If for this next tuple the ACTIVATE flag is set the 
up e » to be used for matching, etc. Next, the Number of Key-Value Pairs attributes of the anti-tuple and selected 
tuple are compared. If these do not match then there is no possibility of a tuple match and the search moves to the 
next tuple in turn. It will be seen that matching attributes results in a quick search that increases the overall speed of 
the search by excluding Impossible matches. 

[0025] The ordering of these checks is not Important and may be reversed in implementation. Analysis of specific 
aprons mayreveal that more time in searching may be saved in searching by one ordering sequence or another. 
This ordering is therefore application specific and may be optionally selected by the user with logic in the device if 
needed. 

[0026] If the preliminary match succeeds, the Search Logic executes a conventional sequential search wherein keys 
andvaluestorthetupleare extracted intomfrommetoplememory12andmatchedagair^me«>nesponding locations 
in the received anti-tuple. This matching begins at the location in memory indicated by the TTAM starting address 
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attribute for the tuple. The search continues location-by-location until either the end of the tuple is reached, which 
indicates that a match has been found, or the first mismatch is found. If a mismatch is found then the Search Logic 
examines the next tuple. Since this is a Pick operation, if a match is found a copy of the tuple is moved to the I/O 
Buffers and the Cancel flag is set in the TTAM location for the matched tuple. The tuple value in I/O is used at the end 

5 of the process to return the matched tuple to the requesting process. The set Cancel flag indicates to the Search Logic 
that the tuple is to be removed from memory (described in detail below with reference to the memory management 
section). The search continues tuple-by-tuple until ail of the tuple attributes in TTAM 1 6 have been checked. 
[0027] At the end of the process the attributes of the received anti-tuple are placed at the bottom of the ATAM memory 
1 8 and the anti-tuple itself is placed at the bottom of the anti-tuple memory 1 4. The memory management process is 

10 then applied to the contents of the tuple memory and the ATAM memory, as described in greater detail below. 

[0028] The algorithms set forth above can be used in parallel across more than one copy of the memory elements 
in the block diagram. In such as case, the TAM, ATAM tuple memory and anti-tuple memory elements are replicated 
as needed and the I/O element is modified to accommodate returned tuples from ail of the memory blocks and to select 
the most suitable memory block to store the incoming tuple or anti-tuple. 

15 [0029] When the DEACT or ACT operator is introduced into the space, it is matched against the attributes in ATAM 
memory 18. Any attribute which matches the template will have its Activate flag reset to the appropriate state. In 
subsequent searches when new tuples are submitted, attributes for the anti-tuples with the Activate flag reset by a 
DEACT operator will not be matched against the tuple. In matching a newly submitted tuple with a stored anti-tuple, 
the state of the ASSOCIATED Activate flag is checked before field-by-field tuple matching is performed. If the Activate 

20 flag has been reset by the DEACT operator, the matching process is aborted 

[0030] The process for activating and deactivating tuples follows an identical pattern with matching of newly submitted 
anti-tuples with tuples dependent on the state of the Activate flag stored with the tuple attribute in TTAM 16. 
[0031] The structure of the new operators according to the present invention is as follows: 



25 OPERATOR [Optional Parameters] Tuple or Anti-tuple 

Thus, the DEACT operator for a tuple is of the form: 
<DEACT_FLAG> <N UMBER OF FIELDS> <TUPLE > 

30 

The ACT operator for a tuple is of the form: 
(ACT FLAG> <NUMBER OF FIELDS> <TUPLE > 

35 [0032] The ACT and DEACT operators for anti-tuples follows the same format. 

[0033] As discussed above, for fine-grained control typically a large number of tuples and anti-tuples are active in a 
specific state. Also, there are typically multiple states for the system. The Deactivate/ Activate flag allows for a many 
tuples and anti-tuples to be activated or deactivated within the tuple space without requiring that they be placed into 
the space one at a time by the appropriate post, pick or peek operations. Consequently, state change context switching 

40 can be done in much less time than is possible according to the prior art In a typical application, all tuples and anti- 
tuples for all states are input to the tuple space at set-up time in a manner similar to an initial program load. The tuples 
are then only deactivated and activated as needed. 

[0034] As discussed above, tuples and anti-tuples are supplied with a time to live parameter (i.e. Time-Out Value 
stored in TAM). This is conventional and is found in many implementations in order to preserve the performance of the 

^5 tuple space against orphan tuples and anti-tuples which have been placed into the space and are no longer needed. 
This is analogous to garbage collection in object-oriented systems (i.e. objects that are not in use are autonomously 
removed). Likewise, in the present invention an autonomous process searches both the tuple memory and anti-tuple 
memory for tuples and anti-tuples that have expired. If the search detects that a tuple or anti-tuple has a time to live 
parameter that is earlier than the current system time, it is removed. 

so [0035] However, according to the present invention, specific operators are provided: one to extend tuples (TUPLE 
EXTEND) and the other to extend anti-tuples (ANTI-TUPLE EXTEND). 

[0036] Each operator is issued with a parameter that indicates the amount of time that the tuple or anti-tuple is to be 
extended. Thus, in the situation where a process may wish to extend the life of its tuples and anti-tuples the operator 
is supplied with a template (i.e. the structure of the fixed and don't care fields) that is matched against tuples or anti- 
55 tuples as needed. 

[0037] On the occurrence of matched tuples or anti-tuples, the time to live field receives the value of the extension 
field in the incoming operator added to it. 

[0038] The structure of the TUPLE EXTEND operator is as follows: 
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<TUPLE_EXTEND xEXTENSION VALUE> <TUPLE> 

[0039] The structure of the ANTI-TUPLE EXTEND is as follows: 

<ANTI-TUPLE EXTEND> < EXTENSION VALUE> <ANTI-TUPLE> 

[0040] The Mass Timer Extension of the present Invention allows large numbers of tuples or anti-tuples to beidentified 
at one time and to have their time to live parameters extended. In conventional systems this process \s required to be 
performed one tuple/anti-tuple at a time with the appropriate post, peek and pick operators thereby decreasing the 
responsivrty of the system and making it less suitable for fine-grained operation. 

[0041] The Query operation according to the present invention is very valuable for tuple spaces that are used for 
private information and/or are used in an open environment In such environments, it is possible for an intruder to insert 
an anti-tuple in the space in order to retrieve private information about a person (e.g. the person's location, which could 
be used by a stalker to track a victim). The Query operator provides a fail-safe mechanism to overcome mis problem. 
QUERY searches through the anti-tuple memory and returns all anti-tuples which match the template supplied with 
the operator. Thus, using the example tuple given above, John Doe whishes to find all anti-tuples that are subscribed 
to his name, he can use this operator with a template that has his name as fixed and the remainder as "don't cares". 
[0042] If the QUERY operator detects an unauthorized antntuple, the process removes the anti-tuple using a Cancel 
operation and reports the infraction to a management application. Thus, the Query operator provides a fail safe en- 
forcement strategy that detects and removes all illicit anti-tuples. 

[0043] Variations and modifications of the invention are contemplated.AII such alternative embodiments are believed 
to fall within the sphere and scope of the invention as defined by the appended claims. 



Claims 

1 . A method of operating a tuple space implemented in memory, comprising: 

storing tuples of key-value pairs of data; 
storing anti-tuples of key-value pairs of data; 

- storing selected attributes of respective ones of said tuples and anti-tuples, wherein said selected attributes 
each include at least an activate flag which activates respective ones of said tuples and anti-tuples when set 
and deactivates respective ones of said tuples and anti-tuples when reset; 

- operating on said attributes to selectively activate and deactivate said tuples and anti-tuples conforming to a 
predetermined template; 

- performing preliminary searches of said selected attributes to identify only said tuples and anti-tuples for which 
said activate flag is set as possible matching tuples and anti-tuples; and 

- comparing said key-value pairs of said possible matching tuples and anti-tuples to identity actual matching 
tuples and anti-tuples. 

2. The method of claim 1 , wherein said step of operating on said attributes comprises applying one of either an ACT 
or DEACT operator to said activate flag. 

3. The method of daim 1 or 2, wherein said DEACT operator applied to a tuple attribute is of the form <DEACT FLAG> 
<N UMBER OF FIELDS> <TUPLE >. 

4. The method of claim 2, wherein said DEACT operator applied to an anti-tuple attribute is of the form 
<DEACT_FLAG> <NUMBER OF FIELDS> <ANTI-TUPLE >. 

5. The method of ciaim 2, wherein said ACT operator applied to a tuple attribute is of the form <ACT FLAG> 
<NUMBER OF FIELDS> <TUPLE >. 

6. The method of claim 2, wherein said ACT operator applied to an anti-tuple attribute is of the form <ACT FLAG> 
<N UMBER OF FIELDS> <ANTI-TUPLE >. 

7. The method of claim 1 , further comprising the step of defining a time-out value as one of said attributes representing 
the absolute system time when respective ones of said tuples and anti-tuples are to be automatically cancelled 
from said tuple space. 

8. The method of claim 7, further comprising the step of operating on said attributes to selectively extend said time- 
out value, and wherein said step of operating on said attributes may including applying one of either an TUPLE 
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EXTEND or ANTI-TUPLE EXTEND operator to said time-out value, and wherein said TUPLE EXTEND operator 
may be of the form <TUPLE_EXTEND > <EXTENSION VALUE> <TUPLE>, while said ANTI-TUPLE EXTEND 
operator may be of the form <ANTI-TUPLE_EXTEND > <EXTENSION VALUE> <ANTI-TUPLE>. 

9. A method of operating a tupie space implemented in memory, comprising: 

- storing tuples of key-value pairs of data; 

- storing anti-tuples of key-value pairs of data; 

- comparing said key-value pairs to identify matching tuples and anti-tuples; and 

performing an operation on said anti-tuples to return all anti-tuples conforming to a predetermined template. 

10. The method of claim 9, wherein said step of performing said operation on said anti-tuples comprises issuing a 
QUERY operator of the form <QUERY> <TEMPLATE> <ANTl-TUPLE>. 
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